tailwind-design-system

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: Analysis of the skill instructions and code snippets reveals no evidence of malicious intent, prompt injection, or obfuscation. The provided patterns for OKLCH colors and semantic tokens align with official Tailwind CSS documentation and industry best practices.
  • [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The skill references standard development dependencies such as class-variance-authority and @tailwindcss/forms. These are well-known, widely adopted packages within the frontend ecosystem.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing untrusted data by auditing existing project configuration files and CSS variables. Ingestion points: tailwind.config.* files and global CSS files (SKILL.md). Boundary markers: None explicitly defined. Capability inventory: Generates CSS theme blocks and TypeScript component variants (SKILL.md). Sanitization: Not applicable as the workflow is limited to structural code generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 03:00 PM
Security Audit — agent-trust-hub — tailwind-design-system